My Own VPN in Rust: How I Debated with the Network, TLS, and Myself

▤ Summary

This article introduces Qeli, a self-hosted VPN built in Rust with clients for Android, Windows, and macOS. It focuses on the product’s architecture, including TLS 1.3, hybrid X25519 + ML-KEM-768 key exchange, and multiple transport and obfuscation modes. The piece also covers implementation details such as TUN handling, replay protection, performance tuning, and platform-specific integration. It positions the project as an open-source alternative for privacy-focused VPN use cases and invites contributors and users to try it on GitHub.

▦ Linked Companies